$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft File: IAg9TfqETFcnVYxMdW2yDfgHzYE.mft (raw, json) Hash identifier: FwxyzKUfmpH+yIffdjUVhgor0ZbMbB8Q2I2T+y9DEbY= Subject key identifier: 5B:CE:17:E3:73:E8:7B:A2:8F:F1:4F:7A:82:34:1E:30:D7:C0:1F:0A Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 Certificate issuer: /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Certificate serial: 277F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft Manifest number: 2730 Signing time: Sat 31 May 2025 15:38:01 +0000 Manifest this update: Sat 31 May 2025 15:38:01 +0000 Manifest next update: Sat 07 Jun 2025 15:38:01 +0000 Files and hashes: 1: IAg9TfqETFcnVYxMdW2yDfgHzYE.crl (hash: Ny7fwB3nER0opmI6dKfUaWeK14qDeDKEuJn1y/01O2Q=) 2: B9AC3CD4B0F011E5A08A224DC4F9AE02.roa (hash: UoNQyiMbzRM8LTAnCH5+6vt93Lw53vJESQHvBWYcjss=) 3: BD84664CB0F011E5A08A224DC4F9AE02.roa (hash: cpPBl2HZl2WMGx0/E7w0QxRgBvloFKsPNiFCwchG+b8=) 4: BBF567AEB0F011E5A08A224DC4F9AE02.roa (hash: gUaglzjVEo/jAQam5U3T7T5H9G5lSnkvKcItCzMbsY0=) 5: AE887848662211E7BC7E2636C4F9AE02.roa (hash: lXtCcZI3WY8OIlNn2pthb5U4nO4x25l4CIfkoHRn3ik=) 6: 42724A42D87811E98F4DC832C4F9AE02.roa (hash: g3qXc5xzXRuZuGvrf+0l5unc13/FwmeQdJGJ36GeWJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10111 (0x277f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Validity Not Before: May 31 15:38:01 2025 GMT Not After : Jun 7 15:38:01 2025 GMT Subject: CN=683b2259-ac62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:98:0a:0d:0a:8b:1f:96:4c:05:0e:5e:b8:24: 9f:09:08:ec:3c:c6:19:62:be:c6:58:5e:14:a0:cc: 67:f5:96:2d:f1:f2:25:73:5e:28:90:a7:74:b2:b7: 15:45:bd:66:e9:39:3b:e4:0b:92:9e:37:5b:17:98: 7f:76:8a:b1:8c:ad:ee:a8:ed:48:29:17:64:33:da: e1:b4:c5:4c:d7:f8:16:64:cc:1d:90:e4:8f:53:ec: aa:3c:19:ca:c2:b3:51:d9:4a:b2:60:36:bc:61:52: 4d:fd:ac:66:62:fc:02:f6:47:3d:23:47:3f:0a:46: 38:d6:87:99:73:00:cc:1b:dd:ad:a9:44:d8:87:31: f4:ff:91:64:3a:ec:23:5b:1c:c0:fc:85:53:8a:da: 60:b1:51:80:b7:43:d0:d8:9a:a9:4c:b1:6c:ff:7b: 7b:da:b5:6c:28:bf:ae:92:5d:d9:8b:2b:d0:55:fa: 46:67:2f:55:69:31:ff:ce:64:94:35:3a:08:67:cc: d0:49:74:cf:0f:0c:ab:cd:b4:a7:64:9f:b8:2a:5f: ea:bc:3a:e5:c3:52:cb:f6:55:06:aa:72:8e:60:2f: 13:d0:d8:bd:e5:e9:92:3d:c2:25:a3:29:55:08:12: 55:1d:a7:eb:2a:a1:50:99:5b:1e:7a:fb:17:8d:85: 3b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CE:17:E3:73:E8:7B:A2:8F:F1:4F:7A:82:34:1E:30:D7:C0:1F:0A X509v3 Authority Key Identifier: keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:fc:53:17:42:57:c5:d2:53:58:cf:0c:4f:56:21:ed:59:ad: fa:6a:35:32:af:82:8e:b6:91:85:66:46:c3:24:85:d9:82:9f: d5:f6:ed:94:70:ee:2f:27:93:f0:3d:7e:2e:44:a3:23:10:a2: 82:1f:a3:48:98:23:fe:bc:a7:fd:10:0c:81:9a:69:90:3f:3b: 79:4b:8c:f9:6a:20:2d:96:b3:38:bd:0c:fc:31:36:c8:8b:79: b8:38:df:fa:7a:ae:68:40:f4:a2:c0:3a:8f:c3:0f:6d:83:98: 5a:d4:21:ab:78:44:f9:8f:b2:a7:91:69:57:c3:d6:d5:8d:06: bc:5e:54:fc:13:c9:25:88:e1:e1:79:78:f2:76:23:e3:25:7f: 16:a9:e5:6c:5b:d2:1d:66:5c:24:cd:fd:33:4b:2f:82:00:43: f0:a5:2b:48:76:cc:bb:7f:b7:d3:4b:84:ee:46:26:e8:e8:d5: a7:78:59:de:79:a2:ac:c2:c9:00:dd:b4:65:09:99:d1:d2:d4: a0:90:20:26:38:c7:3f:be:00:0c:30:f5:85:76:25:21:9c:fc: 8a:6c:2d:f6:3a:4b:a0:41:14:14:f7:ff:d7:32:fa:29:87:12: 70:76:8e:aa:ab:7e:81:52:cb:e4:24:f5:b9:0b:4c:29:f8:1b: 2d:2d:76:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFNjAxMTAvBgNVBAUTKDIwMDgzRDRERkE4NDRDNTcyNzU1OEM0Qzc1NkRCMjBE RjgwN0NEODEwHhcNMjUwNTMxMTUzODAxWhcNMjUwNjA3MTUzODAxWjAYMRYwFAYD VQQDEw02ODNiMjI1OS1hYzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5pgKDQqLH5ZMBQ5euCSfCQjsPMYZYr7GWF4UoMxn9ZYt8fIlc14okKd0srcV Rb1m6Tk75AuSnjdbF5h/doqxjK3uqO1IKRdkM9rhtMVM1/gWZMwdkOSPU+yqPBnK wrNR2UqyYDa8YVJN/axmYvwC9kc9I0c/CkY41oeZcwDMG92tqUTYhzH0/5FkOuwj WxzA/IVTitpgsVGAt0PQ2JqpTLFs/3t72rVsKL+ukl3ZiyvQVfpGZy9VaTH/zmSU NToIZ8zQSXTPDwyrzbSnZJ+4Kl/qvDrlw1LL9lUGqnKOYC8T0Ni95emSPcIloylV CBJVHafrKqFQmVseevsXjYU7eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvOF+Nz 6Huij/FPeoI0HjDXwB8KMB8GA1UdIwQYMBaAFCAIPU36hExXJ1WMTHVtsg34B82B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUU2MC9GMTk5NjcxMkM3 Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRGY25WWXhNZFcyeURmZ0h6 WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lBZzlUZnFFVEZjblZZeE1kVzJ5RGZnSHpZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUU2MC9GMTk5NjcxMkM3Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRG Y25WWXhNZFcyeURmZ0h6WUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2/FMXQlfF0lNYzwxPViHtWa36ajUyr4KOtpGFZkbDJIXZgp/V9u2U cO4vJ5PwPX4uRKMjEKKCH6NImCP+vKf9EAyBmmmQPzt5S4z5aiAtlrM4vQz8MTbI i3m4ON/6eq5oQPSiwDqPww9tg5ha1CGreET5j7KnkWlXw9bVjQa8XlT8E8kliOHh eXjydiPjJX8WqeVsW9IdZlwkzf0zSy+CAEPwpStIdsy7f7fTS4TuRibo6NWneFne eaKswskA3bRlCZnR0tSgkCAmOMc/vgAMMPWFdiUhnPyKbC32OkugQRQU9//XMvop hxJwdo6qq36BUsvkJPW5C0wp+BstLXaW -----END CERTIFICATE-----Generated at Sat May 31 17:17:32 2025 by rpki-client